Security · Security Architecture
Cloud Security
Securing cloud platforms through identity, configuration posture, network controls, workload protection and control plane monitoring.
IntermediateUpdated 2026-09-01
Overview
In cloud, the control plane is the crown jewel: an identity with broad rights can create, read and destroy everything through an API. Identity and permission design therefore outranks network controls in impact.
Configuration posture management, infrastructure as code review, workload protection and control plane audit logging together provide the coverage that traditional network security assumed.
Security considerations
- Enforce MFA and just in time elevation on all cloud administrative access; eliminate long lived access keys.
- Centralise and retain control plane audit logs outside the account or subscription they describe.
- Continuously check for public storage, permissive security groups and unencrypted data stores.